Encyption

3 respostas [Última entrada]
bitf
Desconectado
Joined: 10/27/2009

I've been experimenting with encryption using encfs and cryptkeeper. Encryption is something I will never fully understand but am prepared to try. I cannot figure out what algorithm I'm using for encryption. It would be nice to know whether I'm using something strong or the static equivalent of WEP. How would I go about learning this?

Mithrandir
Desconectado
Joined: 10/02/2010

Actually, WEP is for network communication. I think you're talking about disk encryption. In that case, when you choose "Encrypt my home directory", I believe AES and Blowfish are used. Both are industry standards.

bitf
Desconectado
Joined: 10/27/2009

I know that's why I said "a static equivalent." Thanks

iKonaK
Desconectado
Joined: 10/06/2009

bitf, look at the encfs man page:

Standard mode uses the following settings:
Cipher: AES
Key Size: 192 bits
PBKDF2 with 1/2 second runtime, 160 bit salt
Filesystem Block Size: 1024 bytes
Filename Encoding: Block encoding with IV chaining
Unique initialization vector file headers

Paranoia mode uses the following settings:
Cipher: AES
Key Size: 256 bits
PBKDF2 with 3 second runtime, 160 bit salt
Filesystem Block Size: 1024 bytes
Filename Encoding: Block encoding with IV chaining
Unique initialization vector file headers
Message Authentication Code block headers
External IV Chaining

http://manpages.ubuntu.com/manpages/lucid/man1/encfs.1.html

I would recommend you to try cryptsetup; I use it like this:

fdisk -l
dd if=/dev/zero of=/dev/sdx
fdisk /dev/sdx
cryptsetup -c aes-xts-essiv:sha256 -y -s 512 luksFormat /dev/sdx
cryptsetup luksOpen /dev/sdx crypt
cryptsetup status crypt
time mkfs.ext4 -c -v -L volumelabel -m 0 /dev/mapper/crypt

As for the real protection, I'm not sure; I comfort myself with links like this.